Описание
In Eclipse Embedded CDT versions 6.0 to 6.7 if the CMSIS-Pack archive extracts a compromised CMSIS pack the archive extraction can extract files to locations outside of the pack, allowing writing of arbitrary files to other locations on disk.
EPSS
Процентиль: 29%
0.00349
Низкий
9.1 Critical
CVSS3
Дефекты
CWE-22
Связанные уязвимости
CVSS3: 9.1
debian
5 дней назад
In Eclipse Embedded CDT versions 6.0 to 6.7 if the CMSIS-Pack archive ...
CVSS3: 9.1
github
5 дней назад
In Eclipse Embedded CDT versions 6.0 to 6.7 if the CMSIS-Pack archive extracts a compromised CMSIS pack the archive extraction can extract files to locations outside of the pack, allowing writing of arbitrary files to other locations on disk.
EPSS
Процентиль: 29%
0.00349
Низкий
9.1 Critical
CVSS3
Дефекты
CWE-22